Privacy notice

1. Who controls your data

AOO is responsible for the personal-data processing described in this notice. You can contact us on 26313037, through the secure website form, or by post at 32 rue de Luxembourg, L-5230 Sandweiler, Luxembourg.

Last updated: 21 October 2026.

2. Information we may collect

When you use the contact form, we receive the information you choose to provide. The website and hosting provider may also record technical information required for security and operation.

• Enquiry details: name, work email, company, optional phone number, area of interest, indicative budget and message.
• Technical data: IP address, date and time, requested page, browser type, security information and server logs.
• Later communications: information included in subsequent conversations and project documents.

3. Purposes and legal bases

We process personal data only where a lawful basis under the General Data Protection Regulation (GDPR) applies.

• Answering an enquiry and preparing a proposal or contract: steps taken at your request before entering into a contract.
• Securing, maintaining and improving the website: our legitimate interest in operating a reliable service and preventing misuse.
• Meeting accounting, tax or other legal requirements: compliance with a legal obligation.
• Using information for another purpose: your consent where required, which you may withdraw at any time.

4. Recipients and service providers

Access is limited to people at AOO who need the information to handle your request. We may use hosting, email, security or technical-support providers that act on our instructions and under appropriate safeguards.

We do not sell personal data. If a provider processes information outside the European Economic Area, we seek a recognised transfer mechanism and appropriate supplementary safeguards.

5. Retention and security

Enquiries are retained for as long as needed to respond, follow up a potential project and meet applicable legal obligations. Information that is no longer required is deleted or anonymised under our procedures.

We use reasonable access controls, form validation, request throttling and technical maintenance. No Internet-connected system can guarantee absolute security.

6. Cookies and external content

The website may use cookies strictly required for WordPress functionality, security or an administrator session. We do not use these essential cookies to create advertising profiles.

Some images are delivered through an external media service. When those files load, the provider may receive technical information such as your IP address and browser type.

7. Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction or portability of your data, object to certain processing and withdraw consent.

• Send your request through our contact form, call 26313037 or write to our postal address.
• We may request reasonable information to verify your identity before responding.
• You may lodge a complaint with Luxembourg’s National Commission for Data Protection (CNPD).

8. Changes to this notice

We may update this notice when our services, providers or legal requirements change. The date shown near the top identifies the latest version.